Privacy Policy

ChatDatak is operated by Zniber Media. We act as the data controller for account and billing information, and as a data processor for the documents and content you upload to your workspace. Contact: privacy@znibermedia.com.

• Account data: email address, name, the organization and workspaces you join, and your role within them.
• Workspace content:files you upload, the markdown extracted from them, vector embeddings of the extracted text, your prompts, and the assistant's responses (including citations).
• Operational metadata: document upload, delete, and reprocess events; failed access attempts; membership changes; super-admin actions. Stored in activity_logs.
• Public-demo usage: hashed IP addresses for rate-limiting the NYC Audience Twin demo. Raw IPs are not stored.

We do not use third-party analytics. There is no Google Analytics, Mixpanel, Segment, Hotjar, or comparable tracker on the product.

• To provide the chat, retrieval, and document features you signed up for.
• To authenticate sessions and enforce workspace access.
• To investigate abuse, debug failures, and produce admin-side audit trails.
• To send transactional emails (invitations, document-ready notifications) — never marketing emails without separate consent.

• You and other members of your workspace, scoped by role.
• Zniber Media operators with super-admin privileges, only when necessary to diagnose an issue you have raised, perform a support action you have requested, or respond to a legal obligation. Super-admin actions are recorded in activity_logs.
• The sub-processors listed on the Security page, each only for the specific purpose described there.

Your content is not used to train AI models. Neither OpenAI nor Anthropic train on API content under the terms ChatDatak operates on. We do not enable any data-sharing flags.

• Active workspace content is retained while the workspace is active.
• Deleted documents are removed from Postgres, Storage, and Pinecone in the same operation (see the deletion section).
• Activity logs are retained for up to 12 months for security and audit purposes.
• Account deletion removes profile data and triggers workspace cleanup on request.

If you are in the EU, EEA, UK, or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and associated content.
• Export your workspace content in a portable format.
• Object to or restrict processing in specific cases.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, write to privacy@znibermedia.com from the email address on the account. We respond within 30 days.

Data is stored in the European Union (Supabase Frankfurt, eu-central-1; Netlify EU functions). AI provider API calls (OpenAI, Anthropic) may be processed in the providers' default regions; see their respective DPAs.

ChatDatak uses only the cookies needed to keep you signed in (Supabase auth session) and to remember your theme preference. We do not set advertising or tracking cookies.

If we materially change how data is processed, we will update this page and, where appropriate, notify account holders by email before the change takes effect.